OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-97363

HIGH · CVSS 7.5 EPSS 0.32% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-10-02 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

The vulnerability in the WebSocket API allows for an unlimited number of authentication requests due to the lack of rate limiting, potentially enabling attackers to execute denial-of-service or brute-force attacks. Organizations utilizing this API should prioritize addressing this issue to mitigate the risk of unauthorized access and service disruption. Immediate action is recommended for those managing applications that rely on WebSocket connections.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-97363
Severity
HIGH
CVSS
7.5
EPSS
0.32%

Original NVD Description

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access.